This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/F1oHARDbb0413dSyEGLjEDHpSFU.roa File: F1oHARDbb0413dSyEGLjEDHpSFU.roa (raw, json) Hash identifier: /vKh5/kgPMeg0YH31fC61X6lQFd8cqgLCdJuYa3DtJo= Subject key identifier: 17:5A:07:01:10:DB:6F:4E:35:DD:D4:B2:10:62:E3:10:31:E9:48:55 Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Certificate serial: 019AC431E5CB8EE57D2A7CCF33684A3E4BAA Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/F1oHARDbb0413dSyEGLjEDHpSFU.roa Signing time: Thu 27 Nov 2025 07:23:15 +0000 ROA not before: Thu 27 Nov 2025 07:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51852 IP address blocks: 45.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:31:e5:cb:8e:e5:7d:2a:7c:cf:33:68:4a:3e:4b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Validity Not Before: Nov 27 07:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=175a070110db6f4e35ddd4b21062e31031e94855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:6a:fe:d1:0e:32:f3:35:07:d9:45:ef:d0: 63:97:8e:50:e5:5a:08:9f:b3:12:3c:09:44:de:01: 72:cd:4d:44:fc:d3:8b:8b:c1:13:6c:68:1a:6d:57: 2a:6f:51:56:ed:29:a7:2e:05:d7:e8:ec:fc:ec:83: 81:7f:23:56:52:4f:4a:a7:c3:24:2b:a9:51:42:05: 7a:c6:51:a9:af:96:f2:c5:12:d8:b3:7c:64:ed:79: 4c:79:70:db:66:4e:18:90:6a:df:9a:8c:2a:1c:19: 32:4a:95:a5:20:c6:e3:69:30:92:59:6e:59:99:08: 42:9b:4c:91:44:4e:1f:83:50:a0:89:87:1e:5a:78: 9a:2f:c8:20:f0:de:4c:c8:85:14:db:01:63:9a:85: 33:c8:58:dd:37:66:73:3f:ab:74:ca:cf:da:7f:fb: e4:a6:6e:eb:2f:db:b7:8b:7c:40:47:dc:31:79:99: b3:2d:92:bc:ac:3e:3e:16:da:59:5a:68:24:1e:d8: 86:8c:8b:f7:b4:8b:d0:91:46:29:d2:7f:d3:60:5e: 94:90:18:47:61:ee:ed:dd:4b:98:40:2c:6a:9c:ca: bb:98:10:0e:73:00:88:97:60:d5:0a:3a:ae:1e:40: 14:73:d0:b6:c5:b4:fb:93:99:45:d1:c1:08:50:85: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:07:01:10:DB:6F:4E:35:DD:D4:B2:10:62:E3:10:31:E9:48:55 X509v3 Authority Key Identifier: keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/F1oHARDbb0413dSyEGLjEDHpSFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.255.0/24 Signature Algorithm: sha256WithRSAEncryption ae:e5:6f:8b:01:db:ee:df:c9:d7:e7:26:b8:bc:19:64:97:92: 29:b4:4c:df:8f:cb:25:95:d3:3f:d0:81:05:d2:4c:1a:f1:70: b8:f4:f6:22:2d:68:5a:4f:93:4b:99:f7:40:aa:f8:36:c4:47: d8:89:a5:71:07:c7:f6:bf:b6:d1:37:32:35:96:3a:2f:d5:0c: f1:d7:97:dd:2f:d9:ad:c2:f9:76:af:b7:ac:45:d8:77:3d:7c: 86:12:cf:47:0a:4d:ea:1f:c4:01:fe:e0:c6:c2:e4:ea:f2:64: 3a:d3:cb:c7:c8:c8:15:ae:be:ed:40:b5:5b:b3:af:52:a0:89: 28:d2:22:bb:86:aa:7a:1b:23:f7:59:34:9a:2b:b3:00:b8:6b: 74:92:13:ea:45:86:69:ad:31:71:03:48:2a:39:c8:3b:33:e9: a7:19:82:ab:19:f5:98:0f:5d:62:6d:bb:e3:88:91:ed:a2:fc: be:4c:6d:c6:61:03:71:af:95:de:75:16:ff:c1:e6:5d:df:f9: 63:c0:c2:88:a8:d8:e4:29:20:9b:6f:a9:46:48:8f:62:8a:94: 28:e8:d5:4f:b7:d6:20:02:ee:d9:6f:d7:9c:1f:7c:5f:4b:3c: 2a:bb:03:42:36:7d:c4:2e:f5:2f:81:f1:55:f8:41:87:08:b4: 66:82:f5:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEMeXLjuV9KnzPM2hKPkuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0 NzhjYjEwHhcNMjUxMTI3MDcyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzVhMDcwMTEwZGI2ZjRlMzVkZGQ0YjIxMDYyZTMxMDMxZTk0ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CVq/tEOMvM1B9lF79Bjl45Q5VoI n7MSPAlE3gFyzU1E/NOLi8ETbGgabVcqb1FW7SmnLgXX6Oz87IOBfyNWUk9Kp8Mk K6lRQgV6xlGpr5byxRLYs3xk7XlMeXDbZk4YkGrfmowqHBkySpWlIMbjaTCSWW5Z mQhCm0yRRE4fg1CgiYceWniaL8gg8N5MyIUU2wFjmoUzyFjdN2ZzP6t0ys/af/vk pm7rL9u3i3xAR9wxeZmzLZK8rD4+FtpZWmgkHtiGjIv3tIvQkUYp0n/TYF6UkBhH Ye7t3UuYQCxqnMq7mBAOcwCIl2DVCjquHkAUc9C2xbT7k5lF0cEIUIWfQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdaBwEQ229ONd3UshBi4xAx6UhVMB8GA1UdIwQY MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt YTM4YjY3OTVmYjI0LzEvRjFvSEFSRGJiMDQxM2RTeUVHTGpFREhwU0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0 LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVH/MA0G CSqGSIb3DQEBCwUAA4IBAQCu5W+LAdvu38nX5ya4vBlkl5IptEzfj8slldM/0IEF 0kwa8XC49PYiLWhaT5NLmfdAqvg2xEfYiaVxB8f2v7bRNzI1ljov1Qzx15fdL9mt wvl2r7esRdh3PXyGEs9HCk3qH8QB/uDGwuTq8mQ608vHyMgVrr7tQLVbs69SoIko 0iK7hqp6GyP3WTSaK7MAuGt0khPqRYZprTFxA0gqOcg7M+mnGYKrGfWYD11ibbvj iJHtovy+TG3GYQNxr5XedRb/weZd3/ljwMKIqNjkKSCbb6lGSI9iipQo6NVPt9Yg Au7Zb9ecH3xfSzwquwNCNn3ELvUvgfFV+EGHCLRmgvXq -----END CERTIFICATE-----Generated at Sun Dec 7 17:23:22 2025 by rpki-client